Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yjPsCCvK8i83AVs1R7h_T_O-FwY.roa
File: yjPsCCvK8i83AVs1R7h_T_O-FwY.roa (raw, json)
Hash identifier: piWSVghUrwbcJt9+HC29ZhQKkU8Q9zJM+FZxV3a9CcM=
Subject key identifier: CA:33:EC:08:2B:CA:F2:2F:37:01:5B:35:47:B8:7F:4F:F3:BE:17:06
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01857139CC0EFE055378D9AE435ED933C3AF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yjPsCCvK8i83AVs1R7h_T_O-FwY.roa
Signing time: Mon 02 Jan 2023 06:44:51 +0000
ROA not before: Mon 02 Jan 2023 06:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47981
IP address blocks: 194.225.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:cc:0e:fe:05:53:78:d9:ae:43:5e:d9:33:c3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 06:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca33ec082bcaf22f37015b3547b87f4ff3be1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:9c:9f:52:b4:95:97:ee:8b:65:ba:3b:2b:
82:4d:b7:13:d9:43:16:5d:e5:e8:18:04:72:d9:4d:
17:14:1a:47:d7:e6:10:8d:63:77:cd:63:50:72:e0:
f3:2a:87:dc:2d:78:cd:8e:b4:e9:d8:0c:2f:ef:8b:
b9:d5:5f:32:fd:93:be:ba:f0:32:c5:4a:c9:d4:dd:
5c:4d:ac:d7:48:a9:bf:b4:b4:88:97:3f:3e:68:8f:
7e:48:31:f8:bc:48:4e:bc:48:ce:b4:dd:5c:4d:88:
6b:f0:b5:6b:2d:cf:00:c2:dd:a2:cb:6c:c9:f9:3f:
b7:2a:2c:fe:f1:04:00:58:d1:f2:35:0c:c9:b3:28:
f5:b8:03:b6:84:31:c2:7c:25:3c:37:7e:14:dc:15:
bc:38:26:d0:6f:00:91:5d:7e:66:f5:75:12:aa:57:
7b:62:98:09:4c:7d:4f:24:ab:19:c5:0c:b0:14:a8:
ff:6c:72:7a:aa:40:a7:29:46:dc:82:6d:1e:a4:d2:
66:0b:90:07:83:c4:30:29:ff:9c:76:bc:45:12:c9:
2f:8e:31:29:da:9e:bb:84:03:af:06:32:07:bb:5c:
ac:28:85:e3:85:ad:08:3f:75:3b:5f:da:3c:97:88:
2a:b4:7c:76:69:a6:18:f7:de:c2:f2:be:c9:a9:60:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:33:EC:08:2B:CA:F2:2F:37:01:5B:35:47:B8:7F:4F:F3:BE:17:06
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yjPsCCvK8i83AVs1R7h_T_O-FwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.184.0/22
Signature Algorithm: sha256WithRSAEncryption
40:58:4f:2f:a5:0b:5c:75:67:e1:e5:8f:30:e3:00:8c:97:90:
15:f3:67:bb:b1:fb:c4:38:4c:93:8f:f4:a6:ec:da:ba:c9:88:
44:17:a0:f6:8d:41:e3:7a:80:24:ed:56:c6:86:96:43:f5:ae:
15:10:cb:9b:92:73:b6:a3:73:79:ad:03:b1:74:90:de:57:e6:
41:d4:f6:95:56:95:e2:e4:e9:d5:dc:58:16:6d:ca:61:07:7c:
b2:e3:af:ea:3b:19:ac:49:34:ca:0d:01:d2:64:45:c7:b6:5b:
f1:64:ac:15:94:6c:09:14:a0:a0:8c:4b:c8:4a:62:f7:19:ce:
77:89:81:5b:e2:23:a8:c7:06:51:e9:f0:db:07:f9:4e:1e:cf:
14:5e:8f:20:ee:56:62:3f:15:7f:08:82:01:f1:15:f7:eb:4a:
f3:40:83:7c:e0:e3:bb:bd:ce:92:23:fd:6d:55:00:ba:33:9c:
d0:dc:f4:e8:ae:92:82:c5:0a:aa:17:13:f8:1e:18:ff:1d:1d:
37:6e:ea:7e:2f:d6:b3:45:e8:7a:d9:6c:37:8c:06:b7:2f:54:
33:d3:61:e2:d6:a1:cf:b9:b6:27:b5:b8:5a:fd:35:03:a3:59:
07:80:0e:98:bb:90:c8:d2:26:ec:28:9b:65:df:42:f7:89:79:
aa:c0:75:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxOcwO/gVTeNmuQ17ZM8OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjMwMTAyMDY0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTMzZWMwODJiY2FmMjJmMzcwMTViMzU0N2I4N2Y0ZmYzYmUxNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwecn1K0lZfui2W6OyuCTbcT2UMW
XeXoGARy2U0XFBpH1+YQjWN3zWNQcuDzKofcLXjNjrTp2Awv74u51V8y/ZO+uvAy
xUrJ1N1cTazXSKm/tLSIlz8+aI9+SDH4vEhOvEjOtN1cTYhr8LVrLc8Awt2iy2zJ
+T+3Kiz+8QQAWNHyNQzJsyj1uAO2hDHCfCU8N34U3BW8OCbQbwCRXX5m9XUSqld7
YpgJTH1PJKsZxQywFKj/bHJ6qkCnKUbcgm0epNJmC5AHg8QwKf+cdrxFEskvjjEp
2p67hAOvBjIHu1ysKIXjha0IP3U7X9o8l4gqtHx2aaYY997C8r7JqWDCAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMoz7AgryvIvNwFbNUe4f0/zvhcGMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEveWpQc0NDdks4aTgzQVZzMVI3aF9UX08tRndZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwuG4MA0G
CSqGSIb3DQEBCwUAA4IBAQBAWE8vpQtcdWfh5Y8w4wCMl5AV82e7sfvEOEyTj/Sm
7Nq6yYhEF6D2jUHjeoAk7VbGhpZD9a4VEMubknO2o3N5rQOxdJDeV+ZB1PaVVpXi
5OnV3FgWbcphB3yy46/qOxmsSTTKDQHSZEXHtlvxZKwVlGwJFKCgjEvISmL3Gc53
iYFb4iOoxwZR6fDbB/lOHs8UXo8g7lZiPxV/CIIB8RX360rzQIN84OO7vc6SI/1t
VQC6M5zQ3PTorpKCxQqqFxP4Hhj/HR03bup+L9azReh62Ww3jAa3L1Qz02Hi1qHP
ubYntbha/TUDo1kHgA6Yu5DI0ibsKJtl30L3iXmqwHXO
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:00 2024 by rpki-client on console-fra.rpki-client.org